InvoiceTernInvoiceTern privacy
Effective 19 October 2026. Yolleg Ltd controls account/billing data; address in the terms. Contact [email protected].
Information and purposes
We store invoice parties, business addresses, email contacts, entered DE VAT/IBAN details, line items, drafts, validation XML/reports, review history and manual receipt references. This is encrypted server storage, not an on-device-only invoice app. No card details or banking passwords should be entered. We also process account emails, staff roles/invitations, server attribution, contractual consent, subscription references, support and declarations. The organisation determines purposes/lawful basis for workspace data. We provide the requested service and support data enquiries. Account/billing processing relies on contract, legal obligations and security legitimate interests. No advertising tracking, third-party page fonts, cloud AI, sale of data or automated high-impact decisions. Essential secure HttpOnly SameSite cookies last up to 7 days.
Shared access and security
Recoverable email accounts use single-use links lasting 15 minutes, with matching-email confirmation. Sessions last up to 7 days; Sign out all devices revokes other sessions. Recovery needs access to your email. Pro includes the owner plus four named staff, with editor or viewer roles. All staff can read the whole selected workspace and files; there are no per-record or client access boundaries. Staff access requires the owner’s active Pro subscription. Only the owner controls business settings, billing, staff and erasure, and final invoice/plan/release reviews. Editors add ordinary records; viewers cannot write. Staff invitations last 7 days, without an invitation email. Removal blocks subsequent server access, not previously exported copies. New history entries are stamped with account and server-received time; imports do not prove historical authenticity. Records are private to authorised members, without public publishing. Minimise identifying data, use codes and protect email/devices. Never enter passwords, payment credentials or unnecessary sensitive records. Encryption at rest is not end to end; authorised support can decrypt server records.
Providers and transfers
Hosting.com hosts saved records, Stripe processes subscriptions and Twilio SendGrid sends requested sign-in, purchase and declaration messages. No staff-invitation or operational reminder emails. Providers may process data in the US and other countries. Published Data Privacy Framework/UK-extension and contractual clauses/UK-addendum documents do not confirm every account-specific arrangement. Host support/backup geography, full processing agreements and deletion schedules remain unconfirmed; no UK-only promise. We do not receive full card numbers.
Retention and rights
Workspace limits: 20,000 history entries and 16 MB UTF-8 JSON, in addition to plan capacity. Optional PDF originals: free 8 files / 75 MB, Pro 200 / 500 MB, 25 MB per file. Originals are not sanitised, authenticated or parsed as authoritative evidence. Private JPEG API storage: free 2 MB / 30 files, Pro 100 MB / 500 files; 450 KB and 1920 pixels each, six references per record. Draft uploads count. Retained validation/OSV receipts: up to 3,000 checks / 500 MB per workspace, maximum 3 MB each, with a shared service storage budget. JSON contains file references, not original bytes; download originals separately. Keep independent source records. Server workspace/check history remains until owner erasure. Accounts/memberships remain until support processes deletion requests. Billing/consent/complaint records may be retained for 6 years where legally needed. Used/expired sign-in challenges/authentication mail are pruned; invitations last 7 days. Technical logs may include IP, route, time and errors; bounded rate counters use keyed identifiers. Provider backups may outlive live erasure; exact schedules unconfirmed. Request access, correction, deletion, restriction or objection at [email protected]. Use free JSON and separate original downloads for portability. Identify your account without card details/sign-in tokens. You may complain to the UK ICO or local authority. Cancellation does not erase records.
Provider documents
https://stripe.com/legal/dta https://www.twilio.com/en-us/legal/data-protection-addendum https://terms.hosting.com/data-privacy-framework Twilio Binding Corporate Rules do not cover SendGrid; published mechanisms do not confirm all account-specific arrangements.